A vulnerability in azure_security_keyvault_keys versions 0.10.0 through 1.0.0 allows rejected authentication challenges to poison the Key Vault scope cache. This can lead to bearer token and request body disclosure to an attacker-controlled endpoint if the same client is reused after a rejected challenge. The issue is fixed in version 1.0.1 and later.